Lucian Alexandru Necula

**Name of the Vulnerable Software and Affected Versions** Little Orbit GFAC (affected versions not specified) **Description** A NULL pointer dereference in the `GFAC Sys x64.sys` driver allows a local attacker to cause a denial of service. This occurs when crafted requests trigger a system crash. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL, typically leading to an immediate crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Little Orbit GFAC (affected versions not specified) **Description** The driver `GFAC Sys x64.sys` contains a communication port that lacks appropriate access restrictions, allowing a local attacker to access privileged driver functionality. Additionally, the driver is susceptible to a NULL pointer dereference—a condition where the software attempts to read from a memory address that is null—which can be triggered by crafted requests to cause a system crash and a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Little Orbit GFAC (affected versions not specified) **Description** Improper validation and a NULL pointer dereference (a condition where the software attempts to read from a memory address that is null, leading to a crash) in the `GFAC Sys x64.sys` driver allow a local attacker to cause a denial of service via crafted requests that trigger a system crash. Additionally, an attacker can escalate privileges to SYSTEM and execute arbitrary code in kernel mode by sending crafted messages through a Minifilter communication port. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.